$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/461f71a9-2277-49e2-85ce-ca48077f1cfb.roa File: 461f71a9-2277-49e2-85ce-ca48077f1cfb.roa (raw, json) Hash identifier: UaJQ6P/yoIvbLdXqduwT34WCAwOj5b6X5/xx2994GS8= Subject key identifier: 91:34:06:4A:81:F4:E5:88:5C:02:E4:95:48:9F:11:69:F9:60:25:B8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5E410F84109CF85FAF606DDE3CEB17412CFF8795 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/461f71a9-2277-49e2-85ce-ca48077f1cfb.roa Signing time: Mon 01 Sep 2025 15:31:33 +0000 ROA not before: Mon 01 Sep 2025 15:31:33 +0000 ROA not after: Mon 06 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fef:4000::/39 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:41:0f:84:10:9c:f8:5f:af:60:6d:de:3c:eb:17:41:2c:ff:87:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 1 15:31:33 2025 GMT Not After : Oct 6 23:59:59 2025 GMT Subject: serialNumber=fcf3d720bfaafe83ac6533d930473d471a8a57b2513d3a493288ae5ccc7849a3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:72:4f:af:a5:dc:4b:17:61:98:fb:27:b8:70: a8:b1:22:23:d4:ad:2c:8b:89:4e:04:9c:d2:eb:41: 7b:53:e6:8b:eb:37:28:fe:6e:52:af:f2:29:26:4d: 56:f6:92:ca:37:1b:c0:d7:10:62:27:70:0c:2e:19: 87:20:a1:9d:a6:d2:41:5d:d8:be:b9:45:08:56:ab: 23:eb:5d:04:42:ef:e4:6d:a5:bf:4b:fb:7d:9e:c3: 8d:7d:2f:49:61:d2:bc:dc:7a:80:cb:c9:56:aa:9f: fe:96:58:3b:89:8a:e3:d7:3b:d4:16:40:e4:95:62: 2f:06:cb:fa:f7:df:53:f7:c0:85:43:94:d1:44:b2: 2e:96:ba:90:de:86:29:13:81:82:ef:a2:f1:a8:a0: e3:5f:c1:2c:e2:28:d3:73:2d:f7:9e:04:03:07:4b: 9d:a0:89:1d:b4:3e:e5:2a:ea:b5:81:ae:3f:76:74: 17:e5:66:f4:29:22:d4:cd:ce:28:79:23:17:92:2a: 1c:60:97:b4:eb:c5:f0:89:80:6c:1c:4c:5a:4a:84: 16:93:51:cf:67:2f:c8:d6:86:75:fe:d7:b3:21:95: 98:9b:97:1f:d6:e9:03:1f:fc:4b:ae:7d:d1:48:ac: b8:5b:3b:f7:51:0d:d3:87:6e:19:3c:c9:9a:48:17: 46:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:34:06:4A:81:F4:E5:88:5C:02:E4:95:48:9F:11:69:F9:60:25:B8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/461f71a9-2277-49e2-85ce-ca48077f1cfb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fef:4000::/39 Signature Algorithm: sha256WithRSAEncryption 0e:c7:22:14:20:c1:38:ed:9c:62:24:15:09:6e:59:63:4f:c0: a2:3c:74:30:26:d8:24:c6:3c:ab:92:88:1f:ed:1a:6f:6a:cd: 3c:ee:37:4c:43:2d:55:f0:9d:e5:a7:09:a1:99:65:37:8b:b1: 01:74:dc:c6:85:3e:b6:31:15:5d:59:31:a8:14:20:66:a2:15: 6b:1b:69:60:be:e8:b7:ad:f7:76:21:e2:25:fe:26:28:ca:32: e1:5f:a3:6e:f3:ee:a0:c7:a9:d8:ad:49:fe:4d:b8:58:1e:ca: 77:ca:64:52:b5:92:92:a5:d6:a4:4a:be:96:72:6d:69:41:71: db:be:e6:dd:b9:fc:40:bb:37:9c:eb:7f:85:78:03:32:e9:3f: fd:14:9e:84:4a:95:47:18:99:04:ab:8a:82:d2:44:2f:00:eb: 05:ab:6c:cc:a7:28:03:51:cd:96:44:68:1f:32:6f:4d:ab:79: 31:b5:9f:89:8f:5c:a3:6b:a9:d2:b6:e1:42:d9:90:7a:6e:3f: c3:ce:3b:a8:fd:c8:65:b3:7f:5c:ea:ec:83:7c:ab:1e:75:47: cd:c2:4c:86:d4:fa:18:1d:46:4c:db:81:4d:d7:07:6c:82:58: 2e:fa:ac:88:5e:21:c4:44:7a:2b:96:43:a3:16:da:d5:c3:fd: c6:81:4f:54 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUXkEPhBCc+F+vYG3ePOsXQSz/h5UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwOTAxMTUzMTMzWhcNMjUxMDA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BmY2YzZDcyMGJmYWFmZTgzYWM2NTMzZDkzMDQ3M2Q0NzFh OGE1N2IyNTEzZDNhNDkzMjg4YWU1Y2NjNzg0OWEzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDsck+vpdxLF2GY+ye4cKixIiPUrSyLiU4EnNLrQXtT5ovr Nyj+blKv8ikmTVb2kso3G8DXEGIncAwuGYcgoZ2m0kFd2L65RQhWqyPrXQRC7+Rt pb9L+32ew419L0lh0rzceoDLyVaqn/6WWDuJiuPXO9QWQOSVYi8Gy/r331P3wIVD lNFEsi6WupDehikTgYLvovGooONfwSziKNNzLfeeBAMHS52giR20PuUq6rWBrj92 dBflZvQpItTNzih5IxeSKhxgl7TrxfCJgGwcTFpKhBaTUc9nL8jWhnX+17MhlZib lx/W6QMf/EuufdFIrLhbO/dRDdOHbhk8yZpIF0ZxAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUkTQGSoH05YhcAuSVSJ8RaflgJbgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ2MWY3MWE5LTIyNzctNDllMi04NWNlLWNhNDgwNzdmMWNmYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEmAB/vQDANBgkqhkiG9w0BAQsFAAOCAQEADsciFCDBOO2cYiQVCW5ZY0/A ojx0MCbYJMY8q5KIH+0ab2rNPO43TEMtVfCd5acJoZllN4uxAXTcxoU+tjEVXVkx qBQgZqIVaxtpYL7ot633diHiJf4mKMoy4V+jbvPuoMep2K1J/k24WB7Kd8pkUrWS kqXWpEq+lnJtaUFx277m3bn8QLs3nOt/hXgDMuk//RSehEqVRxiZBKuKgtJELwDr BatszKcoA1HNlkRoHzJvTat5MbWfiY9co2up0rbhQtmQem4/w847qP3IZbN/XOrs g3yrHnVHzcJMhtT6GB1GTNuBTdcHbIJYLvqsiF4hxER6K5ZDoxba1cP9xoFPVA== -----END CERTIFICATE-----Generated at Sat Sep 6 14:19:25 2025 by rpki-client